I'm surprised no one here has mentioned Bitcasa. They provide unlimited storage for $99/year, and everything is encrypted locally before being sent over the wire.
Not open source.
Encrypted, deduplicated remote backups
31–40 of 50 posts
Re: Encrypted, deduplicated remote backups
#32Boldshare matches your feature list exactly. Client code will be open source. Beta in November: https://boldshare.com/
> Client code will be open source. On the link you provided I found the following: "Parts of the programm relevant for security and networking actions will be open source." "Parts of the program" might not do it for everyone (me included). Will anyone be able to audit the full source code of the client and compile it themselves, like e.g. tarsnap? Otherwise I fear the usual trust issues arise. If I missed some inform…
Hmm, yeah, part of the program might as well be none of it. Ideally, I'd want to be able to compile it myself and use the resulting binary, or have the client be in Python or something like that.
Re: Encrypted, deduplicated remote backups
#33I'm disappointed there's no comment here from tptacek telling you off for that decidedly dodgy-looking mac-then-encrypt, or the timing side channel in your mac verification. He must be slipping :)
Haha, the MAC-then-encrypt should be fine, since it's stored files, and how is anyone going to use the timing attack when the script runs on trusted hardware anyway? :P
Re: Encrypted, deduplicated remote backups
#34What's wrong with tarsnap? http://www.tarsnap.com/ Added in edit: I see that people are saying it's expensive, and I appreciate that. When I bundle it into my considerations of how much I spend on other things, what I get, and my level of confidence in the service, it seems a good deal to me. In the interests of full disclosure, I don't actually use anything like this, as I have a storage solution provided for me. Bu…
Expensive? Don't we have patio11 regularly telling Colin (Percival) that he's not charging nearly enough?
Re: Encrypted, deduplicated remote backups
#35Boldshare matches your feature list exactly. Client code will be open source. Beta in November: https://boldshare.com/
> Client code will be open source. On the link you provided I found the following: "Parts of the programm relevant for security and networking actions will be open source." "Parts of the program" might not do it for everyone (me included). Will anyone be able to audit the full source code of the client and compile it themselves, like e.g. tarsnap? Otherwise I fear the usual trust issues arise. If I missed some inform…
You can still tell what exactly happens. Two separate processes might be used: one for crypto + network which is open source, the one manages synchronisation (which is the secret sauce of all cloud-sync services, if it works really good).
Updated the FAQ: https://boldshare.com/?lang=en#faq
Re: Encrypted, deduplicated remote backups
#36Another option might be Cyphertite. I have no direct experience with it but I love the browser made by the same group (Xombrero).
Not clear to me from a quick overview of their site if they do de-duplication.
Re: Encrypted, deduplicated remote backups
#37On a slightly larger scale, we work with customers to do encrypted logical database backups using GPG and s3/Glacier.
Works pretty well, and we're able to de-duplicate because we keep local copies and make use of hardlinking. A bit of logic around s3cmd to look for hardlinked files before uploading takes care of the remote de-duplication (which isn't realistic after the files are encrypted).
Not quite as easy to adapt to non-linux machines or as practical for smaller files, but it's still quite useful.
Re: Encrypted, deduplicated remote backups
#38What's wrong with tarsnap? http://www.tarsnap.com/ Added in edit: I see that people are saying it's expensive, and I appreciate that. When I bundle it into my considerations of how much I spend on other things, what I get, and my level of confidence in the service, it seems a good deal to me. In the interests of full disclosure, I don't actually use anything like this, as I have a storage solution provided for me. Bu…
Expensive? Don't we have patio11 regularly telling Colin (Percival) that he's not charging nearly enough?
Cost isn't absolute. SAP might be cheap for what it provides, but you wouldn't use it for your one-man business.
Re: Encrypted, deduplicated remote backups
#39Earlier quoted context omitted.
> Client code will be open source. On the link you provided I found the following: "Parts of the programm relevant for security and networking actions will be open source." "Parts of the program" might not do it for everyone (me included). Will anyone be able to audit the full source code of the client and compile it themselves, like e.g. tarsnap? Otherwise I fear the usual trust issues arise. If I missed some inform…
You can still tell what exactly happens. Two separate processes might be used: one for crypto + network which is open source, the one manages synchronisation (which is the secret sauce of all cloud-sync services, if it works really good). Updated the FAQ: https://boldshare.com/?lang=en#faq
You won't know if the other process is transmitting your key, though.
Re: Encrypted, deduplicated remote backups
#40Another option might be Cyphertite. I have no direct experience with it but I love the browser made by the same group (Xombrero). https://www.cyphertite.com/ Not clear to me from a quick overview of their site if they do de-duplication.
Yes, they do deduplication. I'm using Cyphertite for some of my backups. Works fine, and the pricing is a bit more convenient than Tarsnap for home users.